LOCKON EC-CUBE Access Privilege Vulnerability (CNVD-2016-02686)

LOCKON EC-CUBE is an open source e-commerce website building platform developed by Japan LOCKON Co. The platform supports product login, user evaluation, artwork layout and so on. An access privilege vulnerability exists in LOCKON EC-CUBE versions 3.0.0 through 3.0.9. A remote attacker can exploi...

Microsoft Wins Widespread Support in Privacy Clash With Govt.

Microsoft’s lawsuit against the U.S. government for the right to tell its customers when a federal agency is looking at their emails is getting widespread support by privacy advocates. For many, Microsoft’s stance lends an important and powerful voice to ongoing efforts to reform the Electronic...

Электронная Подпись за 9 минут - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Электронная Подпись за 9 минут published at the 'play' market has multiple vulnerabilities...

Electronic drum kit - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Electronic drum kit published at the 'play' market has multiple vulnerabilities...

Create your Electronic Music - Dynamic Code Loading, External URLs, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Create your Electronic Music published at the 'play' market has multiple vulnerabilities...

Pollin Electronic - Certificates or keys found, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Pollin Electronic published at the 'play' market has multiple vulnerabilities...

Electronic Thermometer HD - MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Electronic Thermometer HD published at the 'play' market has multiple vulnerabilities...

FBI Most Wanted — Three 'Syrian Electronic Army' Hackers Charged for Cyber Crime

Syrian Electronic Army SEA Hackers have made their place on the FBI's Most Wanted List. The US Department of Justice and the Federal Bureau of Investigation FBI are willing to pay $100,000 reward for any information that leads to the arrest of the heads of the infamous hacking group Syrian...

一采通电子采购系统任意文件上传

No description provided by source...

天睿电子图书管理系统后台越权访问

第一处越权： http://xx/trebook//left.asp 第二处越权： http://xx/trebook//left2.asp 第三处越权，可添加管理员： http://xx/trebook/useradd.asp 第四处越权，可添修改管理员密码： http://xx/trebook/glmima.asp...

Amazon Backtracks On Encryption Removal

Amazon reversed course on its unpopular decision to remove encryption from its Fire OS 5 tablets. Over the weekend, Amazon said, customers’ device-level encryption support will return this spring. The move comes after Amazon customers and privacy activists expressed outrage over the company’s...

Thousand electronic safe actually so that you is open a-vulnerability warning-the black bar safety net

! With the electronic safe of the popularity, now there are more and more people began to pay attention to the electronic safe security recently security researchers exposed a crack electronic safe method, the following will take a look at it. Cheap attack high-return A safety Deposit box there a...

天睿电子图书管理系统 gl_bofangdell.asp, gl_xiu.asp 注入漏洞

No description provided by source...

1caitong一采通物质采购电子商务平台系统 fileuploadAction.do 任意文件下载漏洞

No description provided by source...

TCExam 12.2.5 Information Disclosure

--------------------------------------------------------- Correct answer Information Disclosure in TCExam " element for each multiple-choice answer has an "id" attribute with a numeric value indicating in which position the answer was created. Therefore the lowest "id" will always be the right...

Threat Outbreak Alert RuleID20436: Email Messages Distributing Malicious Software on January 14, 2016

Medium Alert ID: 43007 First Published: 2016 January 14 14:30 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20436 may contain the following files: Name |...

Google Search Engine Rank Prefers HTTPS

Nothing in Google’s arsenal carries more weight than its search engine rankings. Pair that weapon with a desire to inspire encrypted connections on the web, and you have a pretty powerful combination. More than a year ago, Google said it was testing a method where a site’s search ranking would be...

Domain Creep? Maybe Not.

I just read a very interesting article by Sydney Freedberg titled DoD CIO Says Spectrum May Become Warfighting Domain. That basically summarizes what you need to know, but here's a bit more from the article: Pentagon officials are drafting new policy that would officially recognize the...

VTech Tablet: a plurality of data breach risks hidden-vulnerability warning-the black bar safety net

! In a recent VTech data leak after the event, everyone might think that VTech electronic toy safety won't be better than now worse. However, in this case, we found two vulnerabilities, a hacker can be from the children of their innotab tablet in grabbing data. Brush mode to steal data For lost,...

Let's Encrypt Initiative Enters Public Beta

The Let’s Encrypt initiative reached yet another milestone this week when it entered public beta, something it claims should help make it easier for website owners to embrace HTTPS encryption. The latest step comes on the heels of the movement issuing its first certificate back in September and...